CBK: KSh 1.6B lost to banking cyber-fraud in 2024

The KSh 47,000 mistake almost every Kenyan SME makes when paying a new supplier

A 30-second lookup before you send M-Pesa can stop a fake paybill, a cloned till, or a stolen email. Most business owners skip it. Then they learn the hard way.

Start my Quick Check — KSh 50

No subscription. Pay with M-Pesa or card. 30-second result.

353

Banking cyber-fraud cases in 2024

up from 173 in 2023

KSh 1.6B

Actually lost to banking cyber-fraud

CBK FSR 2024

KSh 810.7M

Mobile-banking fraud losses

largest single category

Nairobi, July 2026 — A procurement manager we will call James received a WhatsApp message from a supplier he had used twice before. The message said the usual M-Pesa paybill was "under maintenance" and asked him to send KSh 47,000 to a new till number.

It looked like the same contact. Same profile photo. Same tone. He sent the money. By the time the real supplier called to ask why the invoice was unpaid, the till had been cashed out and the number switched off.

James is not careless. He is busy. And in Kenyan business, speed often beats caution. You confirm a paybill over WhatsApp, send the cash, and move on. But the Central Bank of Kenya's latest report shows the cost of that habit is climbing fast.

Why most Kenyan SMEs don't catch fake suppliers

They trust WhatsApp screenshots

A forwarded paybill screenshot can be edited in 30 seconds. A live org-name lookup cannot.

They assume M-Pesa is safe

M-Pesa is secure, but it does not tell you who owns the till or paybill. That is your job.

They have no quick way to verify

Calling Safaricom or waiting for a bank branch takes hours. A payment deadline does not.

How Codec8 Verify works

1

Paste the detail

Enter the paybill, till number, email, or website the supplier gave you.

2

We check the signals

Org-name lookup, fraud corpus, domain age, email pattern, and known scam markers.

3

Get a clear verdict

Green, amber, or red — with the reason you can show your finance team.

What Kenyan business owners say

"We nearly paid a fake 'landlord' till for an office deposit. Codec8 flagged it in under a minute. Saved us KSh 85,000."

— J.K., logistics startup, Nairobi

"I now run a quick check before every new supplier payment. It costs KSh 50 and gives me something to show my partner."

— W.N., retail wholesaler, Mombasa

Limited first-check price

First Quick Check — KSh 50

No subscription. No hidden charges. Get the registered organisation name for any M-Pesa paybill or till in seconds. If we find no risk signals, your next full check is on us.

  • M-Pesa & card accepted
  • 30-second result
  • Cancel anytime
Start my Quick Check — KSh 50

Paystack secured · We never store your PIN

Common questions

What does a Quick Check actually tell me? +

The registered organisation name behind an M-Pesa paybill or till number, plus any fraud-corpus matches and pattern risk flags. It is designed for fast, low-cost decisions before you pay.

Is this only for M-Pesa? +

Quick Check focuses on M-Pesa paybill/till org-name lookup. Full Checks also cover bank accounts, emails, websites, and invoice details.

Do I need a subscription? +

No. Quick Check is a one-time KSh 50 purchase. Subscriptions are only for our Protect and Desk products.

Not ready to pay? Have a question?

Chat on WhatsApp

Source: Central Bank of Kenya, Financial Sector Stability Report 2024. Banking-sector data; SME supplier/payment fraud is typically under-reported.

Codec8 is a paid verification service. The KSh 50 Quick Check is a one-time M-Pesa paybill/till org-name lookup.